CVE-2003-0686
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote...
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
- Record
CVE-2003-0686- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
- Record
CVE-2003-0686- Updated
- 2026-11-02
EUVDEUVD-2003-0677 No score
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
- Record
EUVD-2003-0677- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q9q7-v36f-jr8q No score
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote...
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
- Record
GHSA-q9q7-v36f-jr8q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpam-smbDebian:3.0 |
before 1.1.6-1.1woody1 | 1.1.6-1.1woody1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux pam_lib_smb < 1.1.6 - '/bin/login' Remote Overflow | 2003-08-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0686 is a high vulnerability (CVSS 7.5) in Dave Airlie Pam Smb, published August 26, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 27.0%, the 98th percentile. Fixed in libpam-smb 1.1.6-1.1woody1.